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Brassard, and Vazirani, and by Aharonov, Kitaev, and Nisan to the case where 
the oracle evaluates a unitary operator and the computer is allowed to be in the 
superposition of a query state and a non-query state during computation. We also 
prove the robustness of EQP, BQP, and ZQP under the above general formula- 
tion, extending the earlier results on the robustness of BQP shown by Bennett et 
al. 
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1 Introduction 

In computational complexity theory, an oracle is described as a device for computing some 
Boolean function / at unit cost per evaluation. This allows us to formulate questions such 
as, "If we added the power of computing / to a Turing machine, which functions could be 
efficiently computed by that Turing machine?" Many researchers have investigated the 
computational power of a quantum Turing machine (QTM) with an oracle which computes 
a Boolean function. Berthiaume and Brassard [0 constructed an oracle relative to which 
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the QTM is exponentially more efficient than any deterministic Turing machine, recasting 
the promise problem of Deutsch and Jozsa 0. Bernstein and Vazirani [§] subsequently 
constructed an oracle which produces a superpolynomial gap between the quantum and 
probabilistic Turing machines. This result was improved by Simon [Q , who constructed an 
oracle which produces an exponential gap between the quantum and probabilistic Turing 
machines. Extending Simon's idea and using some new techniques, Shor |^ gave quantum 
polynomial time algorithms for factoring problems and discrete logarithms. On the other 
hand, Bennett, Bernstein, Brassard, and Vazirani (BBBV) [Q showed that relative to an 
oracle chosen uniformly at random, with probability 1, NP-complete problems cannot be 
solved by a QTM in polynomial time. 

The notion of oracles for quantum computers can be naturally extended to a device for 
carrying out a unitary operator U at unit cost per evaluation. This allows us to formulate 
questions such as, "If we added the power of carrying out U to a QTM, which functions 
could be efficiently computed by that QTM?" If U is efficiently carried out, an oracle 
QTM with U seems no more powerful than a non-oracle QTM. In fact, in the classical 
case, if a language L is efficiently computable, a non-oracle Turing machine can efficiently 
simulate an oracle Turing machine with L by substituting a machine computing L for a 
query to L. However, in the case of quantum computing, we need to consider a super- 
position of a query state and a non-query state. Moreover, quantum states with query 
strings of different lengths may superpose, even if each element of the superposition is a 
query state. In these cases, if we merely substitute a QTM computing U for a query to U, 
quantum coherence will collapse. Thus, in this paper, we discuss the following problem. 
If a unitary transformation U is efficiently computable by a QTM, is there a QTM effi- 
ciently simulating an oracle QTM with f/? This problem is called the quantum subroutine 
problem. BBBV solved the quantum subroutine problem in the case where an oracle 
evaluates a deterministic function and the machine enters a query state deterministically. 
Aharonov, Kitaev, and Nisan [^ solved the problem for quantum circuits instead of QTMs 
in the case where an oracle evaluates a probabilistic function. We will positively solve the 
quantum subroutine problem for fully quantum oracles, extending their results to the case 
where the oracle evaluates a unitary operator and the computer is allowed to be in the 
superposition of a query state and a non-query state during computation. We can solve 



the quantum subroutine problem using the simulation of QTMs by quantum circuits |^ 
(See [^ more formally), generalized quantum controls [l^, and the simulation of quantum 



circuits by QTMs. However, we use a quantum analog of a time constructible function. 
Because, this method is simple and it can reduce the polynomial slowdown caused by 
inserting subroutines as much as possible, comparing with the method of using quantum 
circuits. 

For a complexity class C, we say that C is robust if it holds the relation C^ = C. In 
computational complexity theory, it is known that the complexity classes P, BPP, and 
ZPP are robust, while it remains still open whether several classes such as NP and RP 
are robust or not. In this paper, we investigate the robustness of the quantum complexity 
classes EQP, BQP, and ZQP, the quantum analogs of P, BPP, and ZPP, extending 
the earlier result due to BBBV [P], who showed the robustness of BQP in the case where 
the machine enters a query state deterministically. Using a solution for the subroutine 
problem and the method of the proof of BBBV, we can show that EQP and BQP are 
robust in the general case where a query state and a nonquery state may superpose. By 
the method of BBBV, a query step of an oracle QTM can be replaced by a Monte Carlo 
non-oracle QTM, but their method does not work for Las Vegas algorithms. In order to 
prove the robustness of ZQP, we improve their method by keeping a witness to distinguish 
the case where a QTM queries an oracle correctly from other cases. 

This paper is organized as follows. In Section 2 we give definitions and basic theorems 
on QTMs. In Section 3 we introduce a stationary time constructible function, and solve 
the quantum subroutine problem by using this function. This section also contains the 
rigorous formulation of oracle QTMs. In Section 4 we show that EQP, BQP, and ZQP 
are robust in general form, improving the method of BBBV and using a solution of the 
quantum subroutine problem. 

2 Preliminaries 

A quantum Turing machine (QTM) is a quantum system consisting of a processor, a 
bilateral infinite tape, and a head to read and write a symbol on the tape. The formal 
definition of a QTM as a mathematical structure is given as follows. A processor configu- 



ration set is a finite set with two specific elements go and g/, where go represents the initial 
processor configuration and g/ represents the final processor configuration. A symbol set is 
a finite set of the cardinahty at least 2 with a specific element denoted by B and called the 
blank. A Turing frame is a pair (Q, S) of a processor configuration set Q and a symbol set 
S. In what follows, let {Q, S) be a Turing frame. A tape configuration from a symbol set 
S is a function T from the set Z of integers to S such that T{m) = B except for finitely 
many ?7i G Z. The set of all the possible tape configurations is denoted by S*. The 
configuration space of (Q, S) is the product set C{Q, S) = Q x S* x Z. A configuration of 
(Q, S) is an element C = (g, T, ^) of C((5, S). Specifically, if g = go and ^ = then C is 
called an initial configuration of {Q, S), and ii q = qf then C is called a final configuration 
of (Q, S). The quantum state space of (Q, S) is the Hilbert space 7i{Q,T,) spanned by 
C((5, S) with the canonical basis {|C)|C G C((5,S)} called the computational basis. A 
quantum transition function for (Q, S) is a function from Q xT, x Q xH x { — 1, 0, 1} into 
the complex number field C. A (single tape) prequantum Turing machine is defined to 
be a triple M = {Q, S, 6) consisting of a Turing frame {Q, S) and a quantum transition 
function 6 for {Q, S). 

Let M = {Q,Tj,6) be a prequantum Turing machine. An element of Q is called a 
processor configuration of M, the set S is called the alphabet of M, the function 5 is called 
the quantum transition function of M , and an (initial or final) configuration of {Q, S) is 
called the (initial or final) configuration of M. A unit vector in 7i((5, S) is called a siate 
of M. The evolution operator of M is a linear operator Ms on Ti.{Q, S) such that 

M5|g,T,0= E 5(g,T(0,P,r,d)b,Tf,e + rf) (1) 

peQ,res,de{-i,o,i} 

for all (g, T, ^) G C{Q, S), where T^"" is a tape configuration defined by 

r if r/i = ^, 

T(?7i) if r/i 7^ ^. 

Eq. (|l|) uniquely defines the bounded operator Ms on the space H{Q,T,) [|ri|]. A (single 
tape) prequantum Turing machine is said to be a (single tape) quantum Turing machine 
(QTM) if the evolution operator is unitary. 
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The following theorem proved in [|Tl[] characterizes the quantum transition functions 



that give rise to QTMs. If it is assumed that the head must move either to the right or 



to the left at each step, condition (c) of Theorem ^TT| is automatically satisfied. In this 



case, Theorem 2.1 is reduced to the result due to Bernstein and Vazirani 



Theorem 2.1 A prequantum Turing machine M = {Q,T,,6) is a QTM if and only if 6 
satisfies the following condition. 

(a) For any (g, a) & Q x T,, 

pGQ,rGS,dG{-l,0,l} 

(b) For any (g, a), {q', a') E Q x T, with (g, a) ^ (g', cr'), 

Y^ (5(g',o-',p,r,ci)*5(g,a,p, r,ci) =0. 

peQ,Tes,de{-i,o,i} 

(c) For any (g, a, r), (g', a', r') E Q x Y? , 

Y "^(^^ ^'' P' ^'' ^ ~ 1)*'^(9' cr, p, r, rf) = 0. 
peQ,rf=o,i 

(d) For any (g, (X, r), (g', cr', t') E Q x Y? , 

Y ^^^^ ^'' P' ^'' -1)*'^(9' cr, p, r, 1) = 0. 

Let S* C Q X S. A complex-valued function ow SxQxYx { — 1, 0, 1} is unidirectional., 
if we have d = d' whenever (5(p, a, r, g, c?) and 6{p' , a', r', g, rf') are both non-zero, where 
q & Q, (p, cr), {p', o"') G S, r, r' G S, and d, d' G {—1, 0, 1}. A prequantum Turing machine 
(or QTM) is said to be unidirectional if the quantum transition function is unidirectional. 
It is easy to see that a unidirectional prequantum Turing machine is a unidirectional QTM 
if the quantum transition function is unidirectional. It is easy to see that a unidirectional 
prequantum Turing machine is a unidirectional QTM if it satisfies conditions (a) and (b) 



of Theorem p.l| . We can show the following lemma for a unidirectional QTM by a way 
similar to |^ . This lemma allows us to extend a partially defined unidirectional quantum 
transition function so that it can characterize a QTM. 

Lemma 2.2 (completion lemma) Let 6' be a unidirectional function on S x Q x H x 
{—1,0,1}, where S* C Q x S. Assume that 6' satisfies the following conditions (a) and 
(b). 



(a) For any (g, a) G S , 

Y: \6'{q,a,p,T,d)\' = l. 

peQ,rGE,dG{-l,0,l} 

(b) For any (g, ct), (g', a') G S* wi/i (g, cr) 7^ (g', ct'), 

J2 ^'(^'' ^'' P' ^' d)*S'{q, a, p, r, rf) = 0. 

peQ,res,de{-i,o,i} 

r/ien t/iere is a unidirectional QTM M = {Q, S, 6) such that 6{p, a, q, r, d) = 6'{p, a, g, r, d) 
whenever 6'{p, a, g, r, li) zs defined. 

We shall give a formal definition of simulation. Let M = {Q, S, 6) and M' = {Q', S', 5') 
be QTMs. Let t be a positive integer and e > 0. Let e : C{Q, S) -^ C{Q', S') be an 
injection computable in polynomial time, d : C{Q', S') -^ C{Q, S) a function computable 
in polynomial time satisfying rf • e = id, and / a function from N^ to N. We say that M' 
simulates M for t steps with accuracy e and slowdown f (under the encoding e and the 
decoding d), if for any Cq G C{Q, S), we have 

< e- 

If / depends only on t and the above relation is satisfied for e = 0, we merely say that 
M' simulates M for t steps with slowdown /. 

Let M = {Q, S, 6) be an m-track QTM. Then S can be factorized as S = Si x 
S2 X ■ ■ ■ X Tim and T G S'^ can be written in the form {T^,T'^, . . . ,T™'), where T* G 
Sf for i = l,...,m. The function T* is called an i-ih. track configuration. For a 
string a; = XqXi- ■ -Xk-i of length /c, we denote by T[a;] a tape (or track) configura- 
tion such that T[x\{i) = Xi {0 < i < k — 1), B (otherwise). For any tape con- 
figuration T, we will write T = (T\ . . . , T^) if T = (T\ . . . , T^ , T[e], . . . , T[s]), where 
e denotes the empty string. Henceforth, (g, (T^, . . . ,T^), 0) abbreviate a configuration 
(g,(T^...,T^T[£],...,T[£]),(0,...,0)). Let E(e = j), E{q = p), E{f = Tq) and 
E(T^ = To) be respectively projections on span{ |g, T,j) |g E Q, T E S*}, span{|p, T, ^)| 
T e ^*, ^ e Z}, span{|g,To,0|g e Q, ^ E Z} and span{|g,T,0|g E Q, T = 
(T\---,To,---,T'") G S#, ^ G Z}. A QTM M = (Q,S,5) is said to be stationary, 
if given an initial configuration C, there exists some t G N satisfying \\E{C, = 0)E{q = 
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qf)Ml\C)\\'^ = 1 and for all s < t we have \\E{q = g/)M||C)||2 = 0. The positive integer t 
is called the computation time of M for input state \C), and M^\C) is called the final state 
of M for |C). Specifically, if \C) = \qo,T[x],0), the integer t is called the computation 
time on input x. A polynomial time QTM is a stationary QTM such that the computation 
time on every input is a polynomial in the length of the input. It is easy to see that a 
polynomial time bounded QTM (i.e., a QTM whose computation time on every input is 
bounded by a polynomial in the length of the input) can be simulated by a polynomial 
time QTM with at most a polynomial slowdown. Moreover, we say that M = {Q, S, 6) is 
in normal form if S{qf, a, go, o", 1) = 1 for any a G S. Henceforth, we shall consider only 
unidirectional stationary normal form QTMs, since such restricted QTMs are computa- 
tionally equivalent to general QTMs independent of constraints on the error probability 
of algorithms [§] . 

We have discussed solely single tape QTMs, but our arguments can be easily adapted 
to multi-tape QTMs. See [11| for the formulation of the multi-tape QTMs. 



3 Solution of the quantum subroutine problem 

A stationary time constructible (ST-constructible) QTM of a function / : N ^ N is 
defined to be a QTM such that if the initial state is |go5T[x],0), then the final state is 
\qf, T[x], 0) and that the computation time is /(|a;|), where |a;| denotes the length of x. A 
function / : N ^ N is said to be stationary time constructible (ST-constructible) if there 
exists a stationary time-constructible QTM of /. 

Lemma 3.1 For any k > 2, there is an ST-constructible monic polynomial of degree k. 

Proof. We show this theorem by induction on k. First, when A; = 2, we consider a 
two-track QTM M2 = (Q, S x {B,l},6) satisfying the following transition rules, where 
Q = {%^ 111 ■ ■ ■ ^ 15: Qf} and S is an arbitrary symbol set. Henceforth, let a G S\{i?} and 
let Si be an arbitrary symbol in the alphabet of the i-th track. 



(5(go, (cr, B),qi, (a, B), -1) = 1, 5{q4, (a, 1), Qi, {a, 1), 1) = 1, 

6{qi, {B, B), q2, {B, B),l) = l, 6{q,, {si, B), q,, (si, B), -1) = 1, 

6{q2, (o-, B),q2, {a, 1), 1) = 1, (5(^5, {a, 1), gg, (a, 5), -1) = 1, 

6{q2, {B, B), qs, {B, B), -1) = 1, 6{q,, {B, B), qj, {B, B),l) = l 

'^(93,(^^,1), g3,(f^,i),-i) = 1, 

6{q,,{B,B),q,,{B,B),l) = l 

The above partially defined function 6 can be extended to be total by the completion 
lemma. Assuming that the input is written on the first track, M2 implements the following 
steps. 

Step 1. The head of M2 changes each scanned symbol B to the symbol 1 on the second 
track with moving one cell to the right until it scans B on the first track. If the head 
scans B on the first track, it goes to the left until it scans B on the first track again and 
then moves one cell to the right. 

Step 2. We iterate the following operation until the second track comes to be empty, 
where we say that the i-th track T* is empty if T* = T[e]. The head goes to the right 
until it scans B on the second track and then moves one cell to the left. Afterward, the 
head changes the scanned 1 to i? on the second track and moves one cell to the left, goes 
to the left until it scans B again on the second track, and moves one cell to the right if it 
scans B. 

The computation time of M2 is (2n + 4) + Er=o(2^ + 2) = n^ + 5n + 6. 

Next, we assume that there exists a QTM M' such that the initial state and the final 
state are equal except for the processor configuration and that the computation time is a 
monic polynomial p{n) of degree k. Then, we consider a QTM M which implements the 
following steps. 

Step 1. The head of M changes each scanned symbol B to the symbol 1 on an auxiliary 
track with moving one cell to the right until it scans B on the first track. If the head 
scans B on the first track, it goes to the left until it scans B on the first track again and 
then moves one cell to the right. 

Step 2. We iterate the following operation until the auxiliary track comes to be empty. 
Firstly, the head goes to the right until it scans B on the auxiliary track and then moves 



one cell to the left. Secondly, the head changes the scanned 1 to 5 on the auxiliary track 
and moves one cell to the left, goes to the left until it scans B again on the auxiliary 
track, and moves one cell to the right if it scans B. Thirdly, the machine runs M'. Lastly, 
the head goes to the right until it scans B on the auxiliary track and afterward it goes to 
the left until it scans B again on the auxiliary track. 

We can construct a partially defined unidirectional quantum transition function im- 
plementing the above steps similar to the case k = 2. Thus, we obtain the quantum 
transition function of M by the completion lemma. The computation time of M is 
(2n + 4) + I]r=i('^i^ + C2 + p{n)) = np{n) + O(n^), where Ci and C2 are constant pos- 
itive integers. By induction hypothesis on k, the computation time of M is a monic 
polynomial of degree fc + 1. Therefore, the proof is completed. QED 



It can be verified that the following lemma follows from Lemma 3.1 



Lemma 3.2 For any polynomial p of degree k, there is an ST-constructible function f 
such thatp + f is an ST-constructible (and monotone increasing) polynomial of degree k. 

Proof. For k > 2, there exists an ST-constructible monic polynomial of degree k by 
Lemma p.l| . Moreover, it can be verified that 2n + 4, 3n + 4, and a constant function are 
ST-constructible. For example, we can provide an ST-constructible QTM of 3n + 4 whose 
quantum transition function 6 satisfies the following condition, where a is an arbitrary 
non-blank element in the alphabet of that QTM. 

6{qo, cr, gi, a, -1) = 1, 6{q2, B, q^, B, -1) = 1, 
6{qi, B, g2, B, 1) = 1, 6{q4, a, q^, a, -1) = 1, 
6{q2, a, gs, a, 0) = 1, 6{q4, B, qj, B, 1) = 1. 
'^(?3,c^,g2,cr, 1) = 1, 
Thus, any polynomial p{n) = Z]j=o '^i'^"' of degree k is written in the form 

p{n) = bkfk + bk^ifk-i + . . . + 62/2 + bi{2n + 4) + bo{3n + 4) + 6_i, (2) 

where bk, ■ ■ ■ , bo, 6_i G Z, and fk,---,f2 are ST-constructible monic polynomials of degree 
k, . . . ,2, respectively. Now let fi = 2n + 4, fo = 3n + 4, and /_i = 6_i. Let {f^i, . . . ,gi} = 
{bjfj I bj < 0} and {hi, . . . , hm} = {bjfj \ bj > 0}. Then, from Eq. (^ we have 

p{n) -gi- ...- gi = di + ... + dm- (3) 



We can see that the left hand side of Eq. (^) is an ST-constructible polynomial in the 
form p + f, where / is ST-constructible. Moreover, it can be easily verified that Eq. (^) 
can be modified to an equation such that its left hand side is monotone increasing. QED 

BBBV P defined an oracle quantum Turing machine as the following special QTM. 
An oracle quantum Turing machine has a special tape called an oracle tape. Its processor 
configuration set contains special elements qq and qa, which are respectively called the 
prequery processor configuration and the postquery processor configuration. All cells of 
the oracle tape are blank except for a single block of non-blank cells. Given a language 
L called an oracle language, this machine evolves as follows. 

(1) If the processor configuration is qq and the string (x, 6) is written on the oracle 
tape, where (x, 6) G {0,1}* x {0,1}, the processor enters qa while the contents of the 
oracle tape change to (x, h® L{x)) deterministically in a single step, where © denotes the 
exclusive-or. 

(2) If the processor configuration is not g^, then the machine evolves according to the 
quantum transition function. 

Moreover, BBBV mentioned the notion of more general oracle quantum Turing ma- 
chines, which has an oracle unitary transformation instead of an oracle language. Now we 
formulate a quantum Turing machine with an oracle unitary transformation, and give its 
elementary properties. We assume without loss of generality that the processor enters qq 
only when the head position of the oracle tape is zero and that an oracle unitary transfor- 
mation are length-preserving, i.e., a state representing a string of length n is transformed 
into a superposition of states representing strings of length n. 

Let Q be a processor configuration set with qq and qa, let E be a symbol set, let 
(5 be a function from {Q\{qq}) x S x {Q\{qa}) x E x { — 1,0, 1} to C, and let U he a. 
unitary transformation such that U\x) G span{|2;)|2; G {0, 1}""} for any x G {0, 1}". Then 
M = {Q,J],6,U) is said to be an oracle prequantum Turing machine (with U ). The 
evolution operator oi M is defined to be a linear operator Um on 7i((5, S) such that 



f/Af|g,T,0 



SpeQ\{g4,res,dG{-i,o,i} '^(^> ^(0 > P> ^> d) b, ^^ ^ + d) (Q ^ Qq) 
^ye{0,l}M{y\U\x)\qa,^[y],0) (g = g^, T = T[x], ^ = 0) 

\qa,T,C.) (otherwise). 
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If Um is unitary, M is said to be an oracle quantum Turing machine (oracle QTM). Then 
we can obtain the following necessary and sufficient conditions by a way similar to the 



proof of Theorem 2.1 |11 



Theorem 3.3 An oracle prequantum Turing machine M = {Q, S, 6, U) is an oracle QTM 
if and only if the following quantum transition function 6' for {{Q U {r})\{gq, g^}, S) 
satisfies conditions (a) -(d) of Theorem 2A. Here, r is an element which is not in Q. 



S'{<l,^,P,T,d) = 



6{qa, a, qq, T,d) {q = p = r) 

6{qa,a,q,T,d) {q = r, p ^ r) 

^(?, CI, gg, r, rf) {p = r, q ^ r) 

^ Siq,cr,p,T,d) (q^r, p^ r). 

Similarly we can define a multi-tape oracle QTM. For example, if M is a /c-tape oracle 
QTM and the state {ip) of M is jg^, (T^ . . . , T'=-^ T[x]), (rfi, . . . , 4_i, 0)), the state UmI^^) 
is defined to be 

Um\^) = E iy\U\x) \qa, (T\ . . . , T'-\ T[y]), (d,, . . . , 4-i, 0)). 

J/6{0,l}l^l 

Then, the k-th tape is called an oracle tape. We can consider an oracle QTM with a 
language L, defined by BBBV, to be a multi-tape oracle QTM with the unitary trans- 
formation Ul such that Ul\x, h) = \x,b (B L{x)) for all (x, b) G {0, 1}* x {0, 1}. In what 
follows, we denote by M^ (or M^) an arbitrary oracle QTM with a unitary transformation 
U (or a language L). 

We introduce a notion necessary for a solution of the quantum subroutine problem. 
We denote by V{M,x) the set 

V{M,x) = {Ce C(g,S)|3s < t [(C|M||go,T[x],0) ^ 0]}, 

where t is the computation time of M on input x. Let M = {Q, S, 6) be a QTM and 
M' = {Q', Si X S2, 5') be a QTM such that Q x S C Q' x Si. We say that M' carries out 
M with slowdown /, if there exists a function / : N ^ N such that for any input x of M 
and C E V{M,x) there exists some T' G S* (depending on x), and that 

m//I^I)|C)|T') = Yl {C'\Ms\C)\C')\T'), 
c'ec(Q,s) 

11 



where \C)\T') denotes |g, (T, T'),^) for C = (g, T, ^). It is easy to verify that if a QTM 
M' can prepare a track configuration T' satisfying the above condition in polynomial 
time and if M' carries out a QTM M, then M' simulates M for any arbitrary steps. 
We can define analogous notions for multi-tape QTMs and oracle QTMs. For any QTM 
M = {Q, S, 5) and any r e Q, we obtain the oracle QTM M'^ = (Q', S, 5', U) with 
Q' = ((Q\{^}) ^ {0, 1}) U {qq,qa} satisfying the following conditions. 

^'{{q, 0), (T, {p, 1), r, d) = S{q, (7,p, r, d), 
6'{{q,l),a,{q,0),a,0) = l, 
S'iiq, 0), cr, qg, r, d) = 6{q, a, r, r, rf), 
5'(ga, CT, {p, 1), r, rf) = 6{r, a,p, r, d), 
^'(•Ja, cr, qq, r, d) = 6{r, cr, r, r, c/). 

In particular, if U is the identity operator, then M ^ carries out M. Thus, we can consider 
a QTM to be a special case of an oracle QTM. 

We say that a unitary transformation U is polynomial time com,putahle by a QTM M , 
if the final state of M for the initial state |go; T[a;], 0) with |x| = ra is 

Y. (y|f/|x)|g/,T[y],0) 

j/G{0,l}" 

and the computation time of M is a polynomial in n. 

The following theorem gives us the positive answer for the quantum subroutine prob- 
lem. 

Theorem 3.4 // a unitary transformation U is polynomial time computable by a QTM 
M, there are a polynomial p and a polynomial time QTM M' such that M' carries out a 
polynomial time oracle QTM M^ with slowdown p. 

Proof. Let the quantum transition functions of M, M', and M^ be 5, 5', and 5" 
respectively. Let the computation times of M^ and M be f{n) and g{n) respectively. 



By Lemma |3.2| we can assume that g is monotone increasing ST-constructible. Let h = 
g o f + f- Now we consider a QTM M' which implements the following steps on input x, 
where M' has three tapes and the third tape consists of two tracks. 
Step 1. M' writes I'^d^D on the second tape. 

12 



Step 2. M' carries out a single step of M^ by the following steps 2.1-2.3. 

Step 2.1. If the processor configuration is Qq and y is written on the third tape of 
M', which corresponds to the oracle tape of M*^, then the head of the second tape goes 
to the right until it scans B. At the same time, M' runs a QTM carrying out M for 
g{n) steps on the third tape. Afterward, the head of the third tape goes to the right 
while writing a special symbol * on each cell of the second track. Here, let q and p be 
processor configurations of M, let go and g/ be respectively the initial and final processor 
configurations of M, and let a and r be arbitrary elements in the alphabet of M . Moreover, 
throughout this proof, let Si be an arbitrary first tape symbol of M', and let S3 be an 
arbitrary first track symbol of the third tape of M' . 

6'{qg, (si, l,a), (g, 1), (si, 1, r), (0, 1, d)) = 6{qo, a, g, r, d), 

^'{{q, 1), (si, 1, (^), {P, 1), (si, 1, ^), (0, 1, d)) = 6{q, a,p, r, d), (g ^ go, g/) 

6'{{qf, 1), (si, 1, a), g2, (si, 1, a), (0, 1, -1)) = 1, 

5'(g2,(si,l,5),g3,(si,l,5),(0,l,l)) = l, 

6'{q3, (si, 1, S3), g3, (si, 1, (s3, *)), (0, 1, 1)) = 1. 

If the head of the second tape scans B, then the heads of the second and third tape move 
to the left. Specifically, the head of the third tape changes each scanned special symbol 
* to B while going to the left. 

S'{q3, (si, B, S3), g4, (si, B, S3), (0, -1, -1)) = 1, 
6'{q4, (si, 1, (S3, *)), g4, (si, 1, S3), (0, -1, -1)) = 1. 

If the head of the third tape scans B, then M' carries out an ST-constructible QTM 
Mg_i_i of the function g + 1 on input y after moving one cell to the right. Here, g and p 
are processor configurations of M^+i, the symbols a and r are arbitrary elements in the 
alphabet of Mg^i, and 6g^i is the quantum transition function of Mg+i. 

(5'(g4,(si,l,5),g5,(si,l,fi),(0,-l,l)) = l, 

(5'(g5, (si, 1, a), (g, 6), (si, 1, r), (0, -1, d)) = Sg+iiqo, a, g, r, d), 

^'{{q, 6), (si, 1, a), {p, 6), (si, 1, r), (0, -1, d)) = 6g+i{q, a,p, r, d) (g ^ go, g/). 

If the head of the second tape scans B, then it moves one cell to the right and after three 
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steps the processor enters g^- 

6'{{qf, 6), (si, B, S3), gy, (si, B, S3), (0, 1, 0)) = 1, 
6'{q7, (si, 1, S3), qs, (si, 1, S3), (0, 0, 0)) = 1, 
6'{qs, (si, 1, S3), gg, (si, 1, S3), (0, 0, 0)) = 1, 
S'iqg, (si, 1, S3), ga, (si, 1, S3), (0, 0, 0)) = 1. 
Step 2.2. If the processor configuration is not g^, then the head of the second tape 
goes to the right. Here, g and p are processor configurations of M^ . 

S'{q, (si, 1, S3), (g, 2), (si, 1, S3), (0, -1, 0)) = 1, 
S'iiq, 2), (si, B, S3), (g, 3), (si, B, S3), (0, 1,0)) = 1, 
6'{{q, 3), (si, 1, S3), (g, 3), (si, 1, S3), (0, 1, 0)) = 1. 
If the head of the second tape scans B, then it goes to the left. 

6'iiq, 3), (si, B, S3), (g, 4), {s,, B, S3), (0, -1, 0)) = 1, 
6'iiq, 4), (si, 1, S3), (g, 4), (si, 1, S3), (0, -1, 0)) = 1. 
If the head of the second tape scans B again, then it moves one cell to the right. Afterward, 
M ' carries out a single step of M'^ on the first and the third tapes while the head of the 
second tape stays during one step. 

6'{{q, 4), (si, B, S3), (g, 5), (si, B, S3), (0, 1, 0)) = 1, 

^'Hq, 5), (0-1, 1, cr3),p, (ri, 1, r3), (rfi, 0, 4)) = 5"(g, ((Xi, 0-3), p, {n, T3), {di, 4)). 

Step 2.3. If the processor configuration is g^ and the query string is not correctly 
written on the third tape, then the head of the second tape goes to the right, goes to the 
left after it scans B, moves one cell to the right after it scans B again, and M' enters the 
postquery configuration without changing the tape configuration. 

We can implement step 1 since the function h is polynomial time computable by a 
QTM. In step 2.1, M' must carry out M, since if M' only simulates M, then M' may 
leave extra information and computational paths with different extra information do not 
interfere. The partially defined function 6' satisfies the unitary conditions of quantum 
transition functions of multi-tape QTMs ||lT|, so that there exists a QTM implementing 



step 2 by the completion lemma. It is easy to see that the QTM implementing step 2 
carries out M^ with slowdown 2/i(|a;|) + 5 and that the computation time of M' is a 
polynomial in n. QED 
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Using ST-constructible functions, we have reduced polynomial slowdown caused by 
the insertion of subroutines as much as possible. The degree of this polynomial slowdown 
is same as the case of deterministic or probablistic Turing machines. 

Corollary 3.5 If a unitary transformation U is computable by a QTM M in linear time, 
there is a QTM M' which carries out a linear time oracle QTM M^ in quadratic time. 

Next, we consider the bounded error version of the quantum subroutine problem (If a 
unitary transformation U is efficiently computable by a QTM with any accuracy, is there 
an efficient QTM simulating an oracle QTM M^ with any accuracy?). 

A function / : N^ — i> N is said to be stationary time constructive (ST-constructible) 
if there is a QTM satisfying the following condition: the final state of the QTM for the 
initial state |go, (T[x], T[|/]), 0) is |g/, (T[x], T[|/]), 0) and the computation time is /(|x|, \y\). 
Then the following lemma holds by a proof similar to Lemmas |3.1| and p.2|. 



Lemma 3.6 For any polynomial p{n, m) = I]c=i Sd=i cic,dn^^ over Z, where ak^i 7^ 0, 
there is an ST-constructible function f{n,m) = Y!l=i^^d=i^c,dn^rn'^ with bk,i 7^ such 
that p -\- f is ST-constructible. 

We say that a unitary transformation U is approximately polynomial time computable 
by a QTM M if the following conditions hold. 

(1) U\x) e span{|2)|2 e {0, 1}"} for any x G {0, 1}". 

(2) There is a family of unitary transformations {t//} such that the final state of M 
for the initial state |go, T[x, l'], 0) with |a;| = n is 

5: (i/|[/;|x)|g;,T[2/,l'],0) 
ye{o,i}* 

and \\U\x) - f//|x)|| < 1/2' for any x E {0, 1}*. 

(3) The computation time of M is a polynomial in n and /. 

Let M = ((5,S,(5) be a QTM and M' = (Q', Si x ^2,(5') be a QTM such that Q x 
S C Q' X El. We say that M' carries out M with bounded error and slowdown /, if 
there exists a function / : N^ -^ N such that for any input y = (x, l') of M, where 
/ G N, and any C G V{M,y) there exists some T' G S* (depending on y), and that 
||^/(kl,0|^^|2-/) _ {Ms\C)) ® |T')|| < 1/2'. Now using Lemma pl the following theorem 
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holds by a way similar to the proof of Theorem p.4| , and gives the positive answer for the 
bounded error version of the quantum subroutine problem of QTMs. 

Theorem 3.7 If a unitary transformation U is approximately polynomial time com- 
putable by a QTM M, for any I G N there are a polynomial p{n,l) and a polynomial 
time QTM M' such that M' carries out a polynomial time oracle QTM M^ with bounded 
error and slowdown p. 

4 Robustness of quantum complexity classes 

In this section, we identify a language L with its characteristic function cj^, and we 
denote cl{x) by L{x). We shall now define complexity classes for oracle QTMs. These 
definitions naturally extend the notion of complexity classes for QTMs [§, |^. In what 
follows, we assume that the ranges of quantum transition functions are the polynomial 
time computable numbers. 

We say that an oracle QTM M accepts (or rejects) x G {0, 1}* with probability p if the 
final state \il)) of M for the initial state |go; T[a;], 0) satisfies 

||E(fi = T[x])E(f 2 = T[1])|V^)||2 = p (or ||E(f 1 = T[x])E(f2 = T[0])|^)|p = p). 

We say that M recognizes a language L with probability p if M accepts x with probability 
at least p for any x G L and rejects x with probability at least p for any x ^ L. Moreover, 
we say that M recognizes L with probability uniformly larger than p, if there is a constant 
< 7] < 1 ~ p such that M recognizes L with probability p + rj. A language L' is in 
BQP^ (or EQP^) if there is a polynomial time oracle QTM M^ = (Q, S, 5, Ul) that 
recognizes L' with probability uniformly larger than | (with probability 1). Then, M^ 
is called a BQP-machine (or EQP-machine). A language L' is in ZQP if there is a 
polynomial time QTM M^ = {Q,J],6,Ul) satisfying the following conditions: (1) M^ 
recognizes L with probability uniformly larger than i; (2) If M accepts (rejects) x with a 
positive probability, M rejects (accepts) x with probability 0. Such a QTM M^ is called 
a ZQP-machine. For classes C and V of languages, let C^ = UlgoC^. If C^ = C, the 
class C is said to be robust. 

We can apply Theorems |3.4| and p.7| to the robustness of the quantum complexity 
classes EQP and BQP. If L is in EQP, then we can construct a polynomial time oracle 
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QTM such that only the input x and the answer L{x) are written on the tape of the final 
state with probability 1 by the method of Bennett in reversible computation [|12| . In other 



words we can assume that an EQP-machine has only one accepting configuration. His 
method is implemented in the following steps. We compute L{x), copy L{x) into an extra 
track, and carry out the reverse of the process of computing L{x) in order to get rid of the 
scratch work. In the case of QTMs, reverse computation can be implemented by using 
the reversal lemma due to Bernstein and Vazirani 0. By the method of Bennett, we can 
see that for any L E EQP, a unitary transformation Ul such that Ul\x, b) = \x, h®L{x)) 
is polynomial time computable. Thus, EQP is robust by Theorem |3.4 

Theorem 4.1 EQP^^^ = EQP. 

BBBV p showed the following theorem, which ensures the use of a Monte Carlo 
quantum algorithm as a subroutine of another quantum algorithm. 

Theorem 4.2 If a language L is in BQP, for any I G N there is a QTM M which 
recognizes L with probability 1 — 1/2' and has the following property (A): The computation 
timeofMfor\qQ,T[x],0) is a polynomial in \x\ andl, and the final state is a\qf,T,0) + \ilj) , 
where lap > 1- 1/2' and T = (T[x], T[L(x)]). 

Remark. The QTM M obtained in the proof in [§ is not always stationary. However, 
we can construct a stationary QTM with property (A) by using the construction of a 
universal QTM P, |, H. 



Theorem [4.2| guarantees that without loss of generality a BQP-machine recognizing 
L has a clean tape with only the input x and the answer L{x) with arbitrary large 
probability after computation. In other words we can assume that a BQP-machine has 
only one accepting configuration. BBBV |^ claimed that BQP is robust as the corollary 



of Theorem |4.2| , since this theorem allows us to use a QTM recognizing an oracle language 
instead of the oracle itself. However, they considered the case where the machine enters a 
query state deterministically, i.e., they did not discuss the possibility that the coherence 
of different computation paths collapses by the insertion of a QTM recognizing an oracle 
language. We have already solved this problem by Theorem |H]^, so that we can show 
that BQP is robust in the general setting where a query state and a nonquery state may 
superpose. 
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Theorem 4.3 BQP^^^ = BQP. 



Now we consider the robustness of ZQP. If we apply Theorem |4.2| to a language in 
ZQP, the obtained algorithm will not be Las Vegas. Thus, we need the following theo- 
rem, which means that we can also assume that a ZQP-machine has only one accepting 
configuration. 

Theorem 4.4 // a language L is in ZQP, for any I G N there is a QTM M which 
recognizes L with probability 1 — 1/2' and has the following property (B): The computation 
timeofMfor\qQ,T[x],0) is a polynomial in \x\ andl, and the final state is a\qf,T,0) + \ip) , 
where \a\^ > 1 - 1/2', T = (T[x], T[L(x)]), and E{q = qf)E{P = T[k])\ilj) = \iIj). Here, 
we denote by -k a special symbol of the second track of M. 

Proof. For simplicity, we represent a state of a QTM by its track configurations. We 
denote by |T^)|T^) ■ ■ ■ |T") a computational basis vector of a QTM such that for each 
i = l,...,n, the i-th track configuration is T*. Let L G ZQP. Then, we can assume 
that there is a ZQP-machine M' which recognizes L with probability 1 — 1/2'^^ in time 
polynomial in the length of input and /. Let the final state of M' for the initial state \x) 
be 

j:a{w)\x)\L{x))\w) + j:j:0{y,^,v)\y)\z)\v), (4) 

w y,z V 

where x and L{x) denote T[x] and T[L(a;)] respectively, the summations J2v ^^d J2w ^^^ 
respectively taken over all the third track strings, and J2y,z is taken over all the pairs {y, z) 
of the first and second track strings such that {y,z) ^ ((T[x], T[0]), (T[x], T[l])). Then, 
we have X^ui Ic^l""^)!^ ^ 1 — 1/2'+^. Now we consider a ZQP-machine M with seven tracks 
which implements the following steps. 

Step 1. M on input x writes P'd^D between cell 1 and cell p;(|x|), and O^'*^!"^') between 
cell —1 and cell — p;(|x|) of the seventh track. Here, pz(|a;|) is the computation time of M' 
on input x. 

Step 2. M runs M' . 

Step 3. M respectively copies the first and second track strings to the fourth and fifth 
tracks. 

Step 4. M runs the reverse of M' . This step is implementable by the reversal lemma. 
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Step 5. If X is respectively written on the first and fourth tracks, the symbol or 
1 is written on the fifth track, and other tracks are empty, then M writes no symbol. 
Otherwise, M writes a special symbol -k in the cell of the sixth track. 

Step 6. If the first track string and the fourth track string are equal, then M erases 
the fourth track string. 

Step 7. If -k is written in the cell of the sixth track, then M exchanges the contents 
of the second track for those of the sixth track. Otherwise, M exchanges the contents of 
the second track for those of the fifth track. 

Now we shall verify that the desired state is obtained after steps 1-7. The state of the 
system after step 2 is represented by Eq. (Q). After step 3 the system will evolve into the 
state 



Y.a{w)\x)\L{x))\w)\x)\L{x))+Y.P{y.^.v)\y)\z)\v)\y)\z) 
w y,z,v 

= (Y^a{w)\x)\L{x))\w)+Y.P{y,^,v)\y)\z)\v)]\x)\L{x)) 
+ Y. P{y.z.v)\y)\z)\v){\y)\z) -\x)\L{x))). 



y,z,v 

Since the unitary transformation U implementing step 4 is identical on the fourth and 
fifth tracks, there is a unitary transformation U' such that 

U{\T^)\T^)\T'^)\T^)\T'')) = {U'\T^)\T^)\T^)) ® (|T^)|T^)), 

where T* is an arbitrary i-th track configuration for i = 1, . . . , 5. Then, the state of the 
system is 

\x)\B)\B)\x)\L{x)) + U [y. P{y.^.v)\y)\z)\v){\y)\z) -\x)\L{x)))\ 

\y,z,v ) 



= \x)\B)\B)\x)\L{x))^Y.V'\Y^i5{y,z,v)\y)\z)\v) ® {\y)\z) - \x)\L{x))). 

y,z \ V / 

Since we have {y, z) ^ ((T[x], T[0]), (T[x], T[l])), if we write 

U f ^ ^{y,z,v)\y)\z)\v){\y)\z) - \x)\L{x)))\ = ^\x)\B)\B)\x)\L{x)) + |^), 



\y,z,y 



then {iplx, B, B,x, T[l — L{x)]) = 0, where \x, B, B,x, T[l — L{x)]) denotes \x)\B)\B)\x) 
|T[1 — L{x)]). Moreover, we can see that 



2< 



u (Y. Piy,^,v)\y)\z)\v)i\y)\^) - \x)\Lix))) 



\y,z,v 



<Y'^my,^,v)\' = i/2K 



y,z,v 
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Steps 5-7 are impleinentable by using the symbol strings written on the seventh track 
and the branching lemma [§. From the above, M satisfies the statement of this theorem. 
QED 

Let M = (Q, S, 6) be a QTM and M' = (Q', Si x S2 x S3, 6') be a QTM such that 
Q X S C Q' X (Si X S2). We say that M' carries out M with zero error and slowdown 
/, if there exists a function / : N^ —>■ N such that for any input y = {x, V) of M, where 
/ G N, and any C E T)(M, y) there exists some T' E S* (depending on y) satisfying the 
following condition: If mI^^''^'^^\C)\T') = |0) + iV'i) and E{f^ = TM)(|0) + |V^i)) = \iPi), 
then {Ms\C)) \r) = |0) + {^2), |||^i) - |V^2)|| < 1/2', and E{f^ = TM)|V^2) = 0. Using 
Theorem |4.4| we can show the following lemma by a way similar to the proof of Theorem 



3.4. 



Lemma 4.5 If L is in ZQP, there are a polynomial p{n, I) and a polynomial time QTM 
M such that M carries out a polynomial time oracle QTM M^ with zero error and slow- 
down p. 



We shall show that ZQP is robust by using Lemma [4.5| . To this end, we need to 
construct our algorithm so that we cannot erase the symbol * written as a witness of an 
error in the subsequent steps. 

Theorem 4.6 ZQP^^^ = ZQP. 

Proof. Let L E ZQP^^^. Then there is a language L' E ZQP such that L E ZQP^'. 
We can assume that an oracle QTM Mj" recognizes L with probability 1 — 1/2'. Let the 
computation times of Mf be pi{n) = p{n, I). By Lemma ^I5| there are a polynomial /(n, /) 
and a polynomial time QTM M' that carries out a polynomial time oracle QTM Mf" with 
zero error and slowdown /. Now we consider a ZQP-machine Mi which implements the 
following algorithm. We assume that the length of the input x of M; is n. 

Step 1. Ml writes l' and !?'(") on the second and third tapes. 

Step 2. Ml repeats the following operation pi{n) times: If the special symbol * is 
written in the cell of the first tape, then Mi changes the string q^IP'^^^^™- on the third 
tape to Q'nT-+^iPiM-^-^ in g(n,l) steps. Otherwise, M; carries out f{n,l) steps of M' on 
(x, 1') in g{n, I) steps. Here, g is an ST-constructible function. 
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Since the probability that our algorithm incorrectly carries out a single step of Mj" 
and the error probability of M[ are both at most 1/2', the probability that Mi produces 
a correct answer is at least (1 — 1/2')^'^")+-'^. Thus, if 1/2' < l/c'{pi{n) + 1) with some 
constant c', then M/ recognizes L uniformly larger than 1/2. By Lemma p.6| , the branching 
lemma and the looping lemma |^, step 2 is implementable by a stationary QTM. If our 
algorithm incorrectly carries out a single step of M^ then the special symbol *, a witness 
of an error, is written on the second track of the first tape by Theorem ^.4\ . We can see 
that the construction of our algorithm ensures that the symbol -k is not erased in the 
subsequent steps. Therefore, our algorithm is Las Vegas type. Now we can choose / such 
that 1/2' < l/c'{pi{n) + 1) and that / is a polynomial in n, and then the computation 
time of Ml is a polynomial in n. QED 
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